Sabnzbd

Brief description of the application.

Well-Architected Framework (WAF) PRR/ORR Checklist

1. Operational Excellence

Focus: Running and monitoring systems to deliver business value and continuously improving processes.

  • Infrastructure as Code (IaC): Application deployed via IaC (Path: kubernetes/apps/downloads/sabnzbd, Method: Flux HelmRelease).
  • CI/CD Automation: Automated updates configured (e.g., Renovate integration).
  • Observability (Metrics): Application exposes Prometheus metrics.
  • Observability (Logs/Traces): Centralized logging is configured.
  • Runbooks: Incident response runbook is documented.

2. Security, Privacy & Compliance

Focus: Protecting information, systems, and assets while delivering business value.

  • Identity & Access: External access is secured via authentication on N/A.
  • Data at Rest: Storage volumes are encrypted.
  • Secrets Management: Secrets are managed via: ExternalSecrets.
  • Network Isolation: NetworkPolicies restrict unauthorized lateral movement.
  • Vulnerability Management: Container images are scanned (e.g., via Trivy).

3. Reliability

Focus: Ensuring the system can recover from disruptions and dynamically meet demand.

  • High Availability: Application runs multiple replicas across different nodes (1).
  • Disaster Recovery: Backups are configured and regularly tested via VolSync.
  • Data Persistence: State is persisted correctly using appropriate storage classes (N/A).
  • Health Checks: Liveness and readiness probes are configured.

4. Performance Efficiency

Focus: Using computing resources efficiently to meet system requirements.

  • Resource Allocation: CPU and Memory limits/requests are explicitly defined.
  • Auto-Scaling: Horizontal (HPA) or Vertical (VPA) scaling is configured.
  • Optimized Storage: Utilizing appropriate PVC access modes and IOPS-capable storage.

5. Cost Optimization

Focus: Avoiding unnecessary costs and maximizing cloud/hardware investment.

  • Right-Sizing: Resources requested match actual utilization metrics.
  • Lifecycle Management: Unused resources or temporary data are automatically purged.

6. Sustainability

Focus: Minimizing the environmental impacts of running cloud workloads.

  • Utilization Efficiency: Workload scales to zero or downscales during non-peak hours.
  • Hardware Efficiency: Leveraging specialized hardware optimally for specific tasks.